Compliance Monitoring Scheme: Risk-based Assessment Framework